I used Opus 5.5 on max and GPT-6 Astra for 5 days straight and I reversed engineered Elastic Security and extracted all the rules. I made them available here:
https://github.com/elastic/detection-rules
You’re welcome.
A user says they spent five days using Opus 5.5 on max and GPT-6 Astra to reverse engineer Elastic Security and extract its detection rules. The extracted rules are published at
I used Opus 5.5 on max and GPT-6 Astra for 5 days straight and I reversed engineered Elastic Security and extracted all the rules. I made them available here:
https://github.com/elastic/detection-rules
You’re welcome.
Source: Kostas · x.comPublished · added here